Data Deletion & Account Deletion Policy

This Data Deletion & Account Deletion Policy explains how you can request deletion of your account and the personal data associated with it on the Montez Infobyte B2B manufacturing and procurement platform (the “Service”), which is operated by Montez Infobyte Private Limited. It applies to accounts created on our website at montezinfobyte.com and on the Montez Infobyte Android app available on the Google Play Store.

Montez Infobyte uses passwordless email OTP (one-time password) authentication — you do not create a password with us. When you sign in, we verify a 6-digit code sent to your email. The email address you use to sign in is your primary account identifier for all deletion requests.

You can request deletion of your Montez Infobyte account at any time. Because we use passwordless email OTP, the request must be sent from the email address that is linked to the account so we can verify ownership. There is currently no self-serve one-click deletion button inside the app or website; every request is processed by our team so that we can properly verify identity and honour retention obligations required by law.

Once your request reaches us we begin verification and deletion within the timelines set out in Section 11 below.

If you signed up through the Montez Infobyte Android app, please email your deletion request from the same email address you used to sign in to the app. Include the phrase “Account Deletion Request” in the subject line, along with the email registered on your account. We will confirm receipt and complete deletion in accordance with Section 11.

If you registered on our website, sign in at montezinfobyte.com/login to confirm the email address on your account, then send us a deletion request from that email. Our team will verify the request against your session records and process the deletion as described below. If you cannot sign in to confirm your email, you may still email the request — we will complete additional identity checks before deletion.

Send an email to admin@montezinfobyte.com from the email address linked to your account. Include:

• Subject line: “Account Deletion Request”
• The email address registered on your Montez Infobyte account
• Whether you want us to delete just your personal data or the entire account
• Optional: reason for deletion (helps us improve)

We will acknowledge receipt within 2 business days and complete the deletion as described in Section 11.

Once we receive and verify your deletion request:

• Your account is disabled so it can no longer sign in.
• Any active sessions are revoked.
• Personal profile information associated with the account is removed from active systems.
• OTP codes and login history tied to the account are erased.
• Wishlist and saved-quote items linked to your account are removed.
• You receive a confirmation email at the address we deleted from.

• Name, email, phone number, company name and other profile fields.
• Uploaded profile photo or logo.
• Wishlisted products and saved quote drafts.
• Draft RFQs (Request for Quote) not yet submitted to a partner.
• OTP codes and unused authentication artefacts.
• Marketing subscription preferences.

Even after account deletion we may need to retain certain records to meet legal, regulatory, tax, accounting, dispute-resolution and fraud-prevention obligations under Indian law. Where retention is required, we minimise the data kept and restrict access. Typical retained records include:

• Invoices, GST records and transaction receipts (per the Companies Act and GST law).
• Signed contracts, purchase orders and correspondence tied to closed deals.
• Records required for anti-fraud, security or law-enforcement requests.
• De-identified analytics that cannot be linked back to you.

If you have placed an order or received quotes that resulted in a transaction, we are required by Indian tax and accounting laws to keep the related purchase orders, invoices and payment records for a minimum of 7 years from the end of the relevant financial year. These records will remain in our secure archive after your account is deleted but will no longer be linked to a live profile.

To protect our users from unauthorised account deletion, we verify every request. Verification usually consists of:

• Confirming that the request originates from the email address on the account.
• Sending an OTP-based confirmation email to that address before proceeding.
• For business accounts, we may also confirm with a named point of contact.

If we cannot verify the request, we will contact you before doing anything so you are not locked out by mistake.

• Acknowledgement of your request: within 2 business days.
• Verification and account disable: within 7 business days.
• Full deletion of personal data from our active systems: within 30 days.
• Removal from encrypted backup snapshots: within 90 days of the deletion request.

Once your account is deleted, the action cannot be undone. You will lose access to your order history, saved quotes, wishlist, communications and any partner/verification status attached to that account. If you change your mind later you are welcome to sign up again, but we will not be able to recover the deleted account or its data.

Montez Infobyte uses a small number of third-party services to run the platform. When you delete your account we also instruct these services to remove your personal data on our behalf:

• Resend — sends OTP and transactional emails. Deletion request logs are purged within 30 days.
• MongoDB Atlas — our primary database. Records are removed as part of the standard deletion job and rotated out of encrypted backups within 90 days.
• Google Play Services — if you installed the Android app, deleting the app from your device also stops any further device-level analytics from being sent to us. Deleting your Google account or app data is controlled by Google directly.

If we add or change third-party sub-processors in future we will update this policy.

The Service is a B2B platform intended for business users aged 18 or above. We do not knowingly collect personal data from children under 18. If you believe a child has created an account with us, please email admin@montezinfobyte.com and we will delete the account and associated data immediately.

All deletion requests are handled by authorised staff over encrypted channels. Personal data on Montez Infobyte is stored encrypted at rest and in transit. Session tokens are signed with an HMAC secret and cannot be extended after your account is disabled. If you believe your account has been accessed without your permission, please email us immediately at admin@montezinfobyte.com.

We may update this policy to reflect changes to how we handle deletion requests or to comply with new laws. When we do, we will update the “Effective Date” at the top of the page and, for material changes, notify users through the app or website. Your continued use of Montez Infobyte after such an update means you accept the revised policy.

For any questions about this policy, or to submit an account deletion request, please contact us: